CVE-2022-1663

Katalog CVE

CVSS 6.5 · Medium EPSS 0,66%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada stop spam comments project stop spam comments. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

The Stop Spam Comments WordPress plugin through 0.2.1.2 does not properly generate the Javascript access token for preventing abuse of comment section, allowing threat authors to easily collect the value and add it to the request.

Rincian

Terbit di NVD

29 Agustus 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

0,66% peluang dieksploitasi; lebih tinggi dari 50,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wpscan.com/vulnerability/30820be1-e96a-4ff6-b1ec-efda14069e70 exploit · advisory pihak ketiga